CVE-2022-3565

Se ha encontrado una vulnerabilidad, clasificada como crítica, en el Kernel de Linux. Este problema afecta a la función del_timer del archivo drivers/isdn/mISDN/l1oip_core.c del componente Bluetooth. La manipulación conlleva el uso después de libre. Es recomendado aplicar un parche para corregir este problema. El identificador de esta vulnerabilidad es VDB-211088

A use-after-free flaw was found in the Linux kernel’s ISDN over IP tunnel functionality in how a local user triggers the release_card() function called from l1oip_cleanup(). This flaw allows a local user to crash or potentially escalate their privileges on the system.

Jann Horn discovered that the Linux kernel did not properly track memory allocations for anonymous VMA mappings in some situations, leading to potential data structure reuse. A local attacker could use this to cause a denial of service or possibly execute arbitrary code. It was discovered that the video4linux driver for Empia based TV cards in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service or possibly execute arbitrary code.